On Wed, Apr 26, 2006 at 08:59:11AM +0200, Claudio Jeker wrote: > On Wed, Apr 26, 2006 at 08:49:27AM +0200, Mikkel Kruse Johnsen wrote: > > Hi > > > > I have a problem, have just been pointed out that my qmail ldap is an > > reverse open relay, meaning that sending a mail to a non existing user > > on my domain will result i a bounce to the "mail from:" address and that > > can be faked. > > > > So adding "RCPTCHECK" to the environment should do it. > > > > > > :allow,SMTPAUTH="",RETURNMXCHECK="",SANITYCHECK="",RCPTCHECK="",REJECTEXEC="",QHPSI="/usr/bin/clamdscan",QHPSIARG1="--no-summary",LOGLEVEL="4" > > > > That will make the SMTP connection disconnect if the user is not in the > > LDAP. > > > > But sending a mail to a valid user with "-something" after like > > "[EMAIL PROTECTED]" will get accepted. I have compiled without > > DASH_EXT. > > > > What could be the problem ? > > > > Hmpf. Smells like a bug. I'll have a look at it. >
I can not reproduce it. 250 ok rcpt to: <[EMAIL PROTECTED]> qmail-smtpd 20924: rcpt to: [EMAIL PROTECTED] qmail-smtpd 20924: recipient verify, recipient not in goodmailaddr qmail-smtpd 20924: recipient verify, recipient is local qmail-smtpd 20924: bad recipient: [EMAIL PROTECTED] qmail-smtpd 20924: message denied: Sorry, no mailbox here by that name. (#5.1.1) 554 Sorry, no mailbox here by that name. (#5.1.1) What version of qmail-ldap are you using? -- :wq Claudio
